diff --git a/pyproject.toml b/pyproject.toml index c53bebf..bc0dcf9 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -26,6 +26,8 @@ dependencies = [ # not minor). See the `cuda` extra below for the matching mamba-ssm pin. "torch>=2.12.1; sys_platform != 'linux'", "torch==2.6.0; sys_platform == 'linux'", + # hydra-core>=1.3.7 fixes CVE-2026-106439 + "hydra-core>=1.3.7", # urllib3>=2.7.0 fixes CVE-2026-44431 and CVE-2026-44432 "urllib3>=2.8.0", # idna>=3.15 fixes CVE-2026-45409 @@ -171,7 +173,7 @@ meds_tab = [ # from_pretrained(..., device_map=...), so nothing here actually needs # accelerate's device-mapping machinery -- add it if that changes. text = [ - "transformers>=5.17.0", + "transformers>=5.18.0", "sentencepiece>=0.2.0", "protobuf>=7.36.2", ] diff --git a/uv.lock b/uv.lock index 5b7560a..db52c21 100644 --- a/uv.lock +++ b/uv.lock @@ -1,5 +1,5 @@ version = 1 -revision = 3 +revision = 5 requires-python = ">=3.12" resolution-markers = [ "python_full_version >= '3.15' and sys_platform == 'darwin'", @@ -988,7 +988,7 @@ wheels = [ [[package]] name = "huggingface-hub" -version = "1.27.0" +version = "1.33.0" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "click" }, @@ -1001,23 +1001,23 @@ dependencies = [ { name = "tqdm" }, { name = "typing-extensions" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/3e/9b/ddf3d02a8681f1b9ce52fda03d755dad6b74c4f8172304c4c8d2975450f9/huggingface_hub-1.27.0.tar.gz", hash = "sha256:c1fed40ea82a6b41b477f5243546549b792ae0a93abcea608cff66089bf8f8df", size = 942668, upload-time = "2026-08-07T12:48:05.161Z" } +sdist = { url = "https://files.pythonhosted.org/packages/25/2a/484d112c0d8fc5f665d7b65137ac9cdb2953c982391598c3597968a12ee7/huggingface_hub-1.33.0.tar.gz", hash = "sha256:367be21a201db9523eddf8aeac7048f2602c1b308691c97640d5e72ed188007e", size = 1043548, upload-time = "2026-09-24T09:49:29.971Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/de/d8/95b735e183957c1f26d94c52977f09d466d55119cbbc1558ea4975e4c216/huggingface_hub-1.27.0-py3-none-any.whl", hash = "sha256:7df6827c2f956c60fbaa64646e979e566db76f619dd0a9729dfb8c5a3eb4f68d", size = 784926, upload-time = "2026-08-07T12:48:02.905Z" }, + { url = "https://files.pythonhosted.org/packages/fc/16/963096d224b80909432dc16561a615fd33d2d13beef3ce4c63fa25e40867/huggingface_hub-1.33.0-py3-none-any.whl", hash = "sha256:04e434b06e100eddbce9a6e817d72693a7884b10a79bd67ab48080d5c07eb899", size = 846435, upload-time = "2026-09-24T09:49:28.059Z" }, ] [[package]] name = "hydra-core" -version = "1.3.5" +version = "1.3.7" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "antlr4-python3-runtime" }, { name = "omegaconf" }, { name = "packaging" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/3e/e4/69a522676faf88994d93d8a5e69e0666c61cae7f73d1bbcc483222023e74/hydra_core-1.3.5.tar.gz", hash = "sha256:71c441eabbde086062045e4d3fce9e26015244f1a4ac721cf3e444c7edf10633", size = 3264337, upload-time = "2026-08-05T18:33:21.394Z" } +sdist = { url = "https://files.pythonhosted.org/packages/5c/a9/fe2c936f36881e3197a8800f5bfba078d7846d54eb5d009b445eda1ee281/hydra_core-1.3.7.tar.gz", hash = "sha256:d4ff629c7e23b64a9db5fe5b027cf7c55b633b737f03be51ef41b77ed016f75e", size = 3278662, upload-time = "2026-09-14T18:02:55.528Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/9c/97/f9d463a6f3c7d0955753eca5cbbf35b596ac471dd13fe357211a53fd37be/hydra_core-1.3.5-py3-none-any.whl", hash = "sha256:a3ff35b4ea6794e4c83d993016f4bde4ac35797ebe7a08f30e83ed9341880331", size = 155768, upload-time = "2026-08-05T18:33:19.834Z" }, + { url = "https://files.pythonhosted.org/packages/25/0c/21890c10cc94da917c8e47efc1c55cd3e56a1d25ab5947bdd35abaf9fdc1/hydra_core-1.3.7-py3-none-any.whl", hash = "sha256:83606c4a05c770f1e026e0489875f28989829d151799eabd8cfa8cbe82164515", size = 168790, upload-time = "2026-09-14T18:02:53.661Z" }, ] [[package]] @@ -2305,9 +2305,6 @@ wheels = [ name = "nvidia-cufft-cu12" version = "11.2.1.3" source = { registry = "https://pypi.org/simple" } -dependencies = [ - { name = "nvidia-nvjitlink-cu12" }, -] wheels = [ { url = "https://files.pythonhosted.org/packages/27/94/3266821f65b92b3138631e9c8e7fe1fb513804ac934485a8d05776e1dd43/nvidia_cufft_cu12-11.2.1.3-py3-none-manylinux2014_x86_64.whl", hash = "sha256:f083fc24912aa410be21fa16d157fed2055dab1cc4b6934a0e03cba69eb242b9", size = 211459117, upload-time = "2024-04-03T20:57:40.402Z" }, ] @@ -2390,6 +2387,7 @@ name = "odyssey" version = "0.1.0" source = { editable = "." } dependencies = [ + { name = "hydra-core" }, { name = "idna" }, { name = "mimic-iv-meds" }, { name = "polars" }, @@ -2455,6 +2453,7 @@ docs = [ [package.metadata] requires-dist = [ { name = "einops", marker = "extra == 'cuda'", specifier = ">=0.7.0" }, + { name = "hydra-core", specifier = ">=1.3.7" }, { name = "idna", specifier = ">=3.20" }, { name = "interpret-core", marker = "extra == 'ebm'", specifier = ">=0.6.0" }, { name = "mamba-ssm", marker = "extra == 'cuda'", specifier = "==2.3.0" }, @@ -2474,7 +2473,7 @@ requires-dist = [ { name = "tabicl", marker = "extra == 'tabicl'", specifier = ">=2.2.0" }, { name = "torch", marker = "sys_platform != 'linux'", specifier = ">=2.12.1" }, { name = "torch", marker = "sys_platform == 'linux'", specifier = "==2.6.0", index = "https://download.pytorch.org/whl/cu124" }, - { name = "transformers", marker = "extra == 'text'", specifier = ">=5.17.0" }, + { name = "transformers", marker = "extra == 'text'", specifier = ">=5.18.0" }, { name = "urllib3", specifier = ">=2.8.0" }, ] provides-extras = ["cuda", "gemini", "tabicl", "ebm", "survivalpfn", "meds-tab", "text"] @@ -4178,7 +4177,7 @@ wheels = [ [[package]] name = "transformers" -version = "5.17.0" +version = "5.18.0" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "huggingface-hub" }, @@ -4191,9 +4190,9 @@ dependencies = [ { name = "tqdm" }, { name = "typer" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/0e/9e/750649904a065007a838981785b2bd8d9ff26154c6c341ac67d0b7f82c68/transformers-5.17.0.tar.gz", hash = "sha256:a153be279169b55b92d8000bf4af294aed684503d091cca7804da2dd8a9de000", size = 9817878, upload-time = "2026-09-09T15:39:56.886Z" } +sdist = { url = "https://files.pythonhosted.org/packages/9e/6e/5a50ca8aff5fdd4ff21271198d2fb9e1f11bcd0ea279576199c0caa34cba/transformers-5.18.0.tar.gz", hash = "sha256:d89c206e42e841af7cd314b3d2b21c03e977d819cdb4aef65ada048769a644df", size = 10028745, upload-time = "2026-09-30T16:46:00.575Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/e8/d0/c502b60d684adbd98a8dc7d5bb866842772b816ac4354e4608be240041ae/transformers-5.17.0-py3-none-any.whl", hash = "sha256:78ec1ce21579b38dfb83950a0658cd119f87212a2fcfdff478096ce9d6c03801", size = 12295140, upload-time = "2026-09-09T15:39:53.746Z" }, + { url = "https://files.pythonhosted.org/packages/2d/3b/f84d7d12886147c5267216ed6c57d1163e68d24a89b2ad29d835a7089463/transformers-5.18.0-py3-none-any.whl", hash = "sha256:d79e5a515a572ee3deb33eb0d578be47d91e70c75d54cf21bf6eede6edef14a9", size = 12579646, upload-time = "2026-09-30T16:45:57.51Z" }, ] [[package]]